ECHO EMISSARY

Glossary

Personal data

Personal data is any information that directly or indirectly identifies a specific person: name, phone number, address, documents, correspondence.

What it is

If the details let you tell who is meant, they are personal data. A name and a phone number are the obvious cases. But an address, a passport photo, a contract number, a debt amount, a voice message and the correspondence with the client count too.

Sensitive data is a separate group: health, biometrics, religious and political views. Requirements for it are stricter still.

How it looks in practice

A manager asks a client to send a photo of a document in a messenger. The photo ends up on the manager’s phone, in the cloud copy of that phone, in a chat export. A year later nobody remembers where the copies are. This is processing of personal data, with every obligation that comes with it.

Why it matters

The company is responsible for client data, not the employee. The laws of many countries require a basis for processing, collecting only what is needed, keeping it no longer than necessary and protecting it from leaks. Violations bring fines and loss of trust. Specific requirements depend on the country, so the way data is handled should be approved with a lawyer.

The typical mistake

Keeping data everywhere a little: personal phones, spreadsheets on a desktop, files forwarded in chats. Each such copy is a leak point the company does not control.

The rule is simple: fewer copies, clear storage places, access only for those who need it for work.

More in Signals